CVE-2011-3097
The PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a...
The PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an out-of-bounds write error in the implementation of sampled functions.
Exploit likelihood
What each source reports
NVD Score used
The PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an out-of-bounds write error in the implementation of sampled functions.
- Record
CVE-2011-3097- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an out-of-bounds write error in the implementation of sampled functions.
- Record
CVE-2011-3097- Updated
- 2026-11-02
EUVDEUVD-2011-3065 No score
The PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an out-of-bounds write error in the implementation of sampled functions.
- Record
EUVD-2011-3065- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-rvmr-4m43-59gm No score
The PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a...
The PDF functionality in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging an out-of-bounds write error in the implementation of sampled functions.
- Record
GHSA-rvmr-4m43-59gm- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-3097 is a high vulnerability (CVSS 10.0) in Google Chrome, published May 16, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.59%, the 85th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15422
code.google.com/p/chromium/issues/detail?id=123733
securitytracker.com/id?1027067
exchange.xforce.ibmcloud.com/vulnerabilities/75602
googlechromereleases.blogspot.com/2012/05/stable-channel-update.html
securityfocus.com/bid/53540
nvd.nist.gov/vuln/detail/CVE-2011-3097
github.com/advisories/GHSA-rvmr-4m43-59gm